Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/RaPScaMhMcLBRP3pJLcv5QoAGKw.roa
File: RaPScaMhMcLBRP3pJLcv5QoAGKw.roa (raw, json)
Hash identifier: 8jPpUFs7g01M8fL/k4nppr1AxDV74+ZhzQz+0FtelLo=
Subject key identifier: 45:A3:D2:71:A3:21:31:C2:C1:44:FD:E9:24:B7:2F:E5:0A:00:18:AC
Certificate issuer: /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial: E8
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/RaPScaMhMcLBRP3pJLcv5QoAGKw.roa
Signing time: Sun 01 Jan 2023 01:31:09 +0000
ROA not before: Sun 01 Jan 2023 01:31:09 +0000
ROA not after: Fri 15 Dec 2023 01:30:02 +0000
asID: 2527
IP address blocks: 210.174.0.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 232 (0xe8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
Validity
Not Before: Jan 1 01:31:09 2023 GMT
Not After : Dec 15 01:30:02 2023 GMT
Subject: CN=45A3D271A32131C2C144FDE924B72FE50A0018AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fd:82:e7:f0:07:de:20:67:02:18:60:12:74:
a4:3f:6b:38:79:20:f6:9c:25:2b:98:4a:b1:72:bc:
3f:48:fd:29:a7:28:05:33:a6:a3:2a:bc:1c:e3:16:
44:ec:51:a8:2f:c5:13:89:1f:54:b8:97:8c:ef:9a:
0b:a2:cb:fd:69:f6:3e:43:93:cf:2e:e8:84:6a:15:
29:a0:eb:84:dc:a9:22:80:5d:3b:86:a5:74:1f:0a:
b4:03:e4:68:6a:26:13:85:f2:d7:c3:95:f8:7b:f0:
56:14:a3:97:16:81:d3:c7:ef:85:d0:6c:39:d9:0e:
22:14:f9:78:d5:de:d5:c4:e8:f4:d5:a8:7c:54:1f:
22:09:48:ee:47:ec:ee:2e:40:4f:c3:b5:72:2c:e8:
9a:08:3d:77:8c:e0:0a:67:71:8f:61:41:9e:fe:31:
0e:73:9c:07:86:7c:d8:38:48:b1:d7:2d:b6:fc:58:
08:7c:ec:93:b8:50:9b:a2:a1:5f:55:d0:2a:7e:d8:
f5:ab:52:da:ef:56:64:e9:2d:72:5d:46:46:27:a6:
ee:bc:08:fa:10:81:cb:3b:13:b4:a1:a1:df:b5:66:
fd:f1:46:c1:7f:dc:cd:28:e3:2f:e1:26:5b:5b:f3:
56:89:8c:ff:02:0e:47:93:5f:4e:72:de:ac:e1:4c:
1a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:A3:D2:71:A3:21:31:C2:C1:44:FD:E9:24:B7:2F:E5:0A:00:18:AC
X509v3 Authority Key Identifier:
keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/RaPScaMhMcLBRP3pJLcv5QoAGKw.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.174.0.0/18
Signature Algorithm: sha256WithRSAEncryption
b0:de:dc:6c:6e:40:3a:b3:22:ed:ac:aa:13:74:9d:c5:5a:df:
05:3b:27:a5:7c:1e:07:f3:3b:4e:e9:85:e6:c7:4c:8d:9f:e4:
84:b2:12:70:8e:76:4a:5e:42:36:8d:55:6b:ac:2d:fa:30:74:
66:0c:e5:46:41:76:31:fb:57:e6:2c:cc:ba:26:a8:63:0b:f5:
85:81:c5:bf:0b:50:fe:d8:49:50:c2:81:43:b6:8d:aa:a5:41:
ae:fa:fd:9b:05:a8:95:98:56:4d:5f:27:d2:53:fd:fb:50:23:
52:43:e8:70:a0:a4:57:cc:c5:54:13:d1:8d:2f:c4:35:64:af:
91:5a:50:ad:36:1f:b7:25:01:ef:4d:39:13:f0:a1:ee:67:f9:
c3:fb:02:54:26:58:be:94:d0:8f:e1:a0:31:de:6e:5c:53:09:
20:60:93:f1:78:38:9c:0d:65:58:f0:3e:7f:88:8c:56:b4:78:
e4:11:2c:77:1b:96:9f:2a:e6:fc:28:0d:c6:ff:c2:5e:72:99:
ec:db:29:e9:88:59:dc:c5:d0:82:c4:5c:e6:c2:cf:c8:6f:66:
32:36:96:66:9d:3e:8e:70:0d:0a:9c:c3:2e:a8:cb:0b:24:d4:
72:dd:98:cd:15:5f:36:fd:f9:ff:64:85:d1:06:bd:55:65:ae:
f1:8e:58:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 05:13:32 2025 by rpki-client